SandboxAPIs

dev.sandboxapisPublished by sandboxapis.devv0.3.21Updated Nov 4, 2026

Drop-in read-only replicas of GitHub, Jira, Slack and 22 more, preloaded with one fake company.

VerifiedSTDIODesktop onlyDeveloper Tools

Overview

AI-generated overview

Local MCP server providing read-only replica APIs of GitHub, Jira, Slack and 22 more services, preloaded with one fake company's data.

What you can do
  • Query read-only replica APIs of GitHub, Jira, Slack and 22 other services, all filled with data from a single fake company.
  • Use the replicas as stand-ins for real SaaS APIs when building or testing integrations.
  • No tool list is published, so the exact operations available are not documented in the supplied material.
When to use it
Useful when you want an assistant to exercise or demo integrations against GitHub, Jira, Slack and similar APIs without touching real accounts or production data.
Requirements
Runs as a local process over stdio, installed from the npm package @sandboxapis/mcp, so Node.js and npm are needed. Desktop only; no authentication, environment variables or headers are declared.
Before you install
The data is a single fake company's, so results will not reflect any real workspace. The manifest lists no tools, so verify the available operations before relying on it.

Installation

In SourceWeft

  1. Open SandboxAPIs in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Tools

10

orient

Orient in the SandboxAPIs universe

START HERE. Returns everything needed to use SandboxAPIs with no docs: the universe/theme, every API surface and its base URL (git hosts and issue trackers), live-vs-snapshot modes and how to pin, the org and its teams/repos, notable entry points (each with a ready-to-run REST path), where the coverage manifest lives, and this server's access block: whether a key is set and how many requests are left this hour. Writes: this server is READ-ONLY, including for a scratch-enabled key. The scratch layer (a per-key, 24-hour overlay: GitHub issues and issue comments, Jira comments and transitions, and Slack messages into existing channels) is a REST feature, so use the GitHub, Jira or Slack base URL above with your key for it, and expect the tools here to answer from the shared data set alone.

Takes no parameters.

check_budget

Check the remaining request budget

Costs nothing. Call it before any loop of more than a handful of requests. Returns this server's real hourly window (limit, remaining, when it resets) read from the provider's own budget endpoint, which is exempt from the budget it reports, plus whether a key is set and where to raise the limit. The window is ONE bucket per caller shared across every provider host, so the numbers apply to all of them.

Parametersprovider

list_repositories

List the org's repositories

List repositories for the universe's org. Results are identical to the provider's REST API and carry provider-form ids (node_id / numeric id).

Parametersproviderrequired

get_repository

Get a repository

Fetch one repository by name (default: the flagship repo). Provider-shaped, with provider-form ids.

Parametersrepoproviderrequired

list_pull_requests

List pull requests / merge requests

List a repo's pull requests (GitHub) or merge requests (GitLab). Optional state filter.

Parametersrepostateproviderrequired

get_pull_request

Get a pull/merge request with its reviews

Fetch one PR (GitHub) / MR (GitLab) plus its reviews (GitHub) / approvals (GitLab). Returns both in one result; each carries provider-form ids for cross-referencing.

Parametersreponumberrequiredproviderrequired

list_issues

List issues

List a repo's issues. Optional state filter (open/closed/all).

Parametersrepostateproviderrequired

get_user

Get a user

Fetch a user by login/username. Provider-shaped, with provider-form ids.

Parametersloginrequiredproviderrequired

search_commits_by_author

Search commits by author

Find commits authored by a given login in a repo. Returns SHAs (identical across GitHub and GitLab, invariant #5) with a REST path to fetch each, so you can cross-reference against either provider.

Parametersrepoauthorrequiredprovider

get_snapshot

Get a pinned snapshot hostname

Return the pinned, reproducible hostname for a provider. Point your client's base URL at it for drift-free CI. A snapshot regenerates byte-identically on every request.

Parametersproviderrequired

Version history

7
  1. v0.3.21LatestNov 3, 2026
  2. v0.3.20Oct 29, 2026
  3. v0.3.17Oct 20, 2026
  4. v0.3.16Oct 16, 2026
  5. v0.3.15Oct 8, 2026
  6. v0.3.14Oct 3, 2026
  7. v0.3.13Sep 20, 2026

Score

55% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts
  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts

    Publish an icon in the registry entry.

  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • License10 pts

    Declare a license in the repository or the registry entry.